Blocked by UFW on vps2 [5522/tcp]
Source port: 52396
TTL: 253
Packet length: 40
TOS: 0x00
This repo ...
show moreBlocked by UFW on vps2 [5522/tcp]
Source port: 52396
TTL: 253
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-04-03T01:58:30.189302+00:00 ktj-nc sshd[748623]: Connection closed by authenticating user root ...
show more2026-04-03T01:58:30.189302+00:00 ktj-nc sshd[748623]: Connection closed by authenticating user root 138.2.89.229 port 41212 [preauth]
2026-04-03T01:58:30.226965+00:00 ktj-nc sshd[748625]: Connection closed by authenticating user root 138.2.89.229 port 41216 [preauth]
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-04-02T21:41:29.598239+00:00 kyana sshd[283911]: Connection closed by authenticating user root 1 ...
show more2026-04-02T21:41:29.598239+00:00 kyana sshd[283911]: Connection closed by authenticating user root 138.2.89.229 port 41728 [preauth]
2026-04-02T21:41:31.502622+00:00 kyana sshd[283913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.89.229 user=root
2026-04-02T21:41:33.313166+00:00 kyana sshd[283913]: Failed password for root from 138.2.89.229 port 41078 ssh2
...
show less
2026-04-02T21:34:25.557320+00:00 no3 sshd[2368089]: Connection closed by authenticating user root 13 ...
show more2026-04-02T21:34:25.557320+00:00 no3 sshd[2368089]: Connection closed by authenticating user root 138.2.89.229 port 47926 [preauth]
...
show less
2026-04-02T19:55:06.093927+00:00 no4 sshd[2349432]: Connection closed by authenticating user root 13 ...
show more2026-04-02T19:55:06.093927+00:00 no4 sshd[2349432]: Connection closed by authenticating user root 138.2.89.229 port 60814 [preauth]
...
show less
Unauthorized connection attempt detected from IP address 138.2.89.229 to port 22 (banankicks-server) ...
show moreUnauthorized connection attempt detected from IP address 138.2.89.229 to port 22 (banankicks-server) [b]
show less
Brute-Force
Exploited Host
Anonymous
SSH tarpit (endlessh) connection from 138.2.89.229
2026-04-02T15:56:21.405372+00:00 instance-20241105-1951 sshd[1294324]: Connection closed by authenti ...
show more2026-04-02T15:56:21.405372+00:00 instance-20241105-1951 sshd[1294324]: Connection closed by authenticating user root 138.2.89.229 port 33232 [preauth]
...
show less
Hacking
Brute-Force
SSH
Showing 1 to
15
of 23 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩